Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/221fa56a-4e00-462c-9583-3f6493cb4c92/662c9ac4-a841-3038-abcb-dc78faf260e2.roa
File:                     662c9ac4-a841-3038-abcb-dc78faf260e2.roa (raw, json)
Hash identifier:          sDxd3msImfXuuwfdB9lh2AE67x43GiY4KvjYlKCoXCs=
Subject key identifier:   84:7F:4A:0E:83:5D:6F:B7:EC:76:EB:96:0B:5D:1C:9D:E9:62:55:FB
Certificate issuer:       /CN=221fa56a-4e00-462c-9583-3f6493cb4c92
Certificate serial:       010D0C9F43285845A15E196F4A5994922EDAB86C
Authority key identifier: 59:CC:B5:0D:05:57:36:D2:A5:CC:44:F1:5A:C8:20:FD:12:8F:B7:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/221fa56a-4e00-462c-9583-3f6493cb4c92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/221fa56a-4e00-462c-9583-3f6493cb4c92/662c9ac4-a841-3038-abcb-dc78faf260e2.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     7040
IP address blocks:        216.73.162.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 14 Jun 2024 17:38:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:19:6f:4a:59:94:92:2e:da:b8:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=221fa56a-4e00-462c-9583-3f6493cb4c92
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=2de6beea-25e5-44cd-8f36-cb5893dab2d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c5:91:78:62:01:ec:0d:4d:c8:5c:d2:cf:59:
                    a8:e8:f6:ca:6d:68:28:9a:01:25:b9:6f:e9:31:cd:
                    fa:35:50:69:c9:31:d7:77:47:d7:26:9f:47:2a:ed:
                    27:d2:a4:53:37:e1:ea:b2:1e:ed:7f:e4:83:6c:bf:
                    99:d3:45:0d:e2:bd:2c:57:4d:e6:b8:e9:39:96:d3:
                    66:bc:dc:cb:8f:1e:1b:85:05:d5:ff:5b:44:62:f2:
                    5b:76:ca:c9:27:39:12:8b:e2:5c:0c:a2:77:ee:e6:
                    b1:5b:22:0d:d1:c7:ac:53:eb:44:ab:ac:19:ef:0a:
                    a2:35:8e:2f:b6:e6:89:1a:f0:8b:eb:ba:3e:67:d0:
                    b4:70:d3:36:bc:2d:4b:5e:e2:1b:18:f6:b1:dc:7c:
                    85:f8:cc:57:80:e5:bd:a4:69:0a:c7:4d:ab:30:46:
                    b0:c4:5a:b8:9e:74:cb:fa:32:ba:d8:59:ac:49:11:
                    44:f4:85:45:35:11:a8:af:2f:08:a6:5f:04:d6:b1:
                    98:65:14:90:43:67:cc:d5:1d:89:21:73:0d:8a:5a:
                    f8:ca:a2:e2:b3:97:82:f4:de:13:6e:b0:d2:b9:cd:
                    84:ea:8f:27:70:3b:71:48:7e:37:5a:62:e3:57:f8:
                    9c:5c:f1:65:e3:b5:07:cc:ae:bb:01:14:df:d7:33:
                    ef:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:7F:4A:0E:83:5D:6F:B7:EC:76:EB:96:0B:5D:1C:9D:E9:62:55:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/221fa56a-4e00-462c-9583-3f6493cb4c92/662c9ac4-a841-3038-abcb-dc78faf260e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/221fa56a-4e00-462c-9583-3f6493cb4c92/221fa56a-4e00-462c-9583-3f6493cb4c92.crl

            X509v3 Authority Key Identifier:
                keyid:59:CC:B5:0D:05:57:36:D2:A5:CC:44:F1:5A:C8:20:FD:12:8F:B7:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/221fa56a-4e00-462c-9583-3f6493cb4c92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.73.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:bd:32:92:2a:46:1d:e7:93:42:9d:62:6a:40:ba:56:14:4f:
         f9:1d:96:b3:81:da:a1:51:c9:36:b3:1c:58:40:e4:16:49:bc:
         0e:81:7f:ab:e3:f8:a3:7e:c5:29:28:31:f7:71:94:e4:77:a0:
         6e:0f:cd:95:be:ab:0c:9c:8b:91:44:5c:34:35:57:8c:ef:b7:
         ef:b4:3a:18:5b:e8:dc:77:22:4e:07:7c:ad:1e:5d:36:4a:63:
         d8:e0:b6:a7:9b:46:24:1b:5a:db:b0:2f:02:55:ce:06:60:1a:
         de:c3:2c:f0:12:27:97:49:73:84:5b:38:df:aa:b1:01:6b:d2:
         28:83:84:62:c2:fd:df:b3:06:84:d2:0b:dd:7a:3b:21:d5:2a:
         bb:a9:85:b8:d4:d6:33:cc:2e:0e:85:3b:72:4b:47:5c:63:62:
         dd:c5:68:51:d5:72:c5:73:ff:6f:f4:43:9e:bc:3f:98:ac:50:
         14:83:d8:d1:59:a2:d4:a6:46:e7:2e:ce:87:45:58:bc:f0:09:
         00:3d:d9:50:df:f5:31:53:1d:3f:a2:4b:50:5d:67:9d:4b:cb:
         98:f0:4f:7f:dd:e9:c9:7e:19:03:3d:8b:70:d2:af:ec:34:ce:
         a6:11:22:ed:a1:4c:ed:e4:7a:27:87:5c:91:17:4c:fc:75:4f:
         56:2b:9f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----